{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2019:62HSIOKQEAO3EUJ5YVAIFQGK3M","short_pith_number":"pith:62HSIOKQ","canonical_record":{"source":{"id":"1909.05921","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-09-12T19:51:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a052a86629367522c43e899fdac22de98dbed30aba24da4b9dd64368d98f8cee","abstract_canon_sha256":"760b8eb367a1b6ec0cd320b6d5b15a82255bf32d929872d8fd8522974e2246c4"},"schema_version":"1.0"},"canonical_sha256":"f68f243950201db2513dc54082c0cadb1c40ad1fd46f2422b2d84101cf63f747","source":{"kind":"arxiv","id":"1909.05921","version":3},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.05921","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"arxiv_version","alias_value":"1909.05921v3","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.05921","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_12","alias_value":"62HSIOKQEAO3","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_16","alias_value":"62HSIOKQEAO3EUJ5","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_8","alias_value":"62HSIOKQ","created_at":"2026-07-05T00:51:03Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2019:62HSIOKQEAO3EUJ5YVAIFQGK3M","target":"record","payload":{"canonical_record":{"source":{"id":"1909.05921","kind":"arxiv","version":3},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-09-12T19:51:14Z","cross_cats_sorted":["cs.LG"],"title_canon_sha256":"a052a86629367522c43e899fdac22de98dbed30aba24da4b9dd64368d98f8cee","abstract_canon_sha256":"760b8eb367a1b6ec0cd320b6d5b15a82255bf32d929872d8fd8522974e2246c4"},"schema_version":"1.0"},"canonical_sha256":"f68f243950201db2513dc54082c0cadb1c40ad1fd46f2422b2d84101cf63f747","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T00:51:03.950255Z","signature_b64":"ROFeTK3RngJzFjT/61l9b3RkE562KWAAEo9WXqAWsl+X+aRgVUeyJJbKcmjZP9SdIH+FPXy9w8TLgODa5nVoBw==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"f68f243950201db2513dc54082c0cadb1c40ad1fd46f2422b2d84101cf63f747","last_reissued_at":"2026-07-05T00:51:03.949812Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T00:51:03.949812Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"1909.05921","source_version":3,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:51:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"YizFySrWVt4VCZt6wCm87g7NJkI9TwxMTGGdf2WhybsOcdgHBMBzL+dT/nWavnpY5BBdqHGntH3Q/NZVBWgjBw==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:13:48.022598Z"},"content_sha256":"2fb8a87ece8bc602f89c0f39713634ac864422cf6af1d40fdd97d53c19be05c2","schema_version":"1.0","event_id":"sha256:2fb8a87ece8bc602f89c0f39713634ac864422cf6af1d40fdd97d53c19be05c2"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2019:62HSIOKQEAO3EUJ5YVAIFQGK3M","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"Towards Model-Agnostic Adversarial Defenses using Adversarially Trained Autoencoders","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":["cs.LG"],"primary_cat":"cs.CV","authors_text":"Amir Rahmati, Atul Prakash, Kevin Eykholt, Pratik Vaishnavi","submitted_at":"2019-09-12T19:51:14Z","abstract_excerpt":"Adversarial machine learning is a well-studied field of research where an adversary causes predictable errors in a machine learning algorithm through precise manipulation of the input. Numerous techniques have been proposed to harden machine learning algorithms and mitigate the effect of adversarial attacks. Of these techniques, adversarial training, which augments the training data with adversarial samples, has proven to be an effective defense with respect to a certain class of attacks. However, adversarial training is computationally expensive and its improvements are limited to a single mo"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.05921","kind":"arxiv","version":3},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/1909.05921/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T00:51:03Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"zC79jWlKiFx9yA7nIwOnzi6D1CcqZFp0I/Q01EoBWf2QAddGHmWjVrnyoZsibgcfQ0E2wRNNclAZfwkUDWnLCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-06T17:13:48.023128Z"},"content_sha256":"1bfc0f63c44f5aaaec8e9f46c83ddee4060165601c2c272f2da1b4b47327f6ec","schema_version":"1.0","event_id":"sha256:1bfc0f63c44f5aaaec8e9f46c83ddee4060165601c2c272f2da1b4b47327f6ec"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/bundle.json","state_url":"https://pith.science/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-06T17:13:48Z","links":{"resolver":"https://pith.science/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M","bundle":"https://pith.science/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/bundle.json","state":"https://pith.science/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/state.json","well_known_bundle":"https://pith.science/.well-known/pith/62HSIOKQEAO3EUJ5YVAIFQGK3M/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2019:62HSIOKQEAO3EUJ5YVAIFQGK3M","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"760b8eb367a1b6ec0cd320b6d5b15a82255bf32d929872d8fd8522974e2246c4","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-09-12T19:51:14Z","title_canon_sha256":"a052a86629367522c43e899fdac22de98dbed30aba24da4b9dd64368d98f8cee"},"schema_version":"1.0","source":{"id":"1909.05921","kind":"arxiv","version":3}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"1909.05921","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"arxiv_version","alias_value":"1909.05921v3","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1909.05921","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_12","alias_value":"62HSIOKQEAO3","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_16","alias_value":"62HSIOKQEAO3EUJ5","created_at":"2026-07-05T00:51:03Z"},{"alias_kind":"pith_short_8","alias_value":"62HSIOKQ","created_at":"2026-07-05T00:51:03Z"}],"graph_snapshots":[{"event_id":"sha256:1bfc0f63c44f5aaaec8e9f46c83ddee4060165601c2c272f2da1b4b47327f6ec","target":"graph","created_at":"2026-07-05T00:51:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/1909.05921/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Adversarial machine learning is a well-studied field of research where an adversary causes predictable errors in a machine learning algorithm through precise manipulation of the input. Numerous techniques have been proposed to harden machine learning algorithms and mitigate the effect of adversarial attacks. Of these techniques, adversarial training, which augments the training data with adversarial samples, has proven to be an effective defense with respect to a certain class of attacks. However, adversarial training is computationally expensive and its improvements are limited to a single mo","authors_text":"Amir Rahmati, Atul Prakash, Kevin Eykholt, Pratik Vaishnavi","cross_cats":["cs.LG"],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-09-12T19:51:14Z","title":"Towards Model-Agnostic Adversarial Defenses using Adversarially Trained Autoencoders"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1909.05921","kind":"arxiv","version":3},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:2fb8a87ece8bc602f89c0f39713634ac864422cf6af1d40fdd97d53c19be05c2","target":"record","created_at":"2026-07-05T00:51:03Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"760b8eb367a1b6ec0cd320b6d5b15a82255bf32d929872d8fd8522974e2246c4","cross_cats_sorted":["cs.LG"],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CV","submitted_at":"2019-09-12T19:51:14Z","title_canon_sha256":"a052a86629367522c43e899fdac22de98dbed30aba24da4b9dd64368d98f8cee"},"schema_version":"1.0","source":{"id":"1909.05921","kind":"arxiv","version":3}},"canonical_sha256":"f68f243950201db2513dc54082c0cadb1c40ad1fd46f2422b2d84101cf63f747","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"f68f243950201db2513dc54082c0cadb1c40ad1fd46f2422b2d84101cf63f747","first_computed_at":"2026-07-05T00:51:03.949812Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T00:51:03.949812Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"ROFeTK3RngJzFjT/61l9b3RkE562KWAAEo9WXqAWsl+X+aRgVUeyJJbKcmjZP9SdIH+FPXy9w8TLgODa5nVoBw==","signature_status":"signed_v1","signed_at":"2026-07-05T00:51:03.950255Z","signed_message":"canonical_sha256_bytes"},"source_id":"1909.05921","source_kind":"arxiv","source_version":3}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:2fb8a87ece8bc602f89c0f39713634ac864422cf6af1d40fdd97d53c19be05c2","sha256:1bfc0f63c44f5aaaec8e9f46c83ddee4060165601c2c272f2da1b4b47327f6ec"],"state_sha256":"79c4f43bafa9cda42aaa030e26bdbf258bc8a18dd82bcfddd58117c1e20df1bc"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"+yAs2HFeAjRMNqbqsCD6G3zZ0JqYQzNZRGBI20fkWS5BpSR5rejNolzCMW8XoTI5H/ffcaCwUArsdqzdRQTFDQ==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-06T17:13:48.029339Z","bundle_sha256":"645d7e67c67279693ed69a3aabcaaf055c4815cf358d36fcb8b15935ce86657b"}}